Privacy Policy

PRIVACY POLICY

Last updated: [DATE]

1. Data Controller

  • Owner: Jorge Guibernau Lisitano (sole proprietor)
  • Tax ID (NIF): 46258947J
  • Address: Carrer Albéniz 3, 17600 Figueres (Girona), Spain
  • Contact email: info@guivernorecords.com

2. What data do we collect?

Depending on how you interact with the store, we may process:

  • Contact and order data: name, shipping and billing address, email, phone (if provided).
  • Payment data: processed entirely by the payment gateway (Shopify Payments / PayPal). Guiverno Records does not store card numbers.
  • Account data (if the customer creates one): username, email, and encrypted password.
  • Browsing data: IP address, browser type, pages visited (via cookies — see Cookie Policy).

3. Purposes and legal basis

| Purpose | Legal Basis | |---|---| | Manage order, payment, and shipping | Performance of the purchase agreement | | Comply with tax and accounting obligations (invoicing) | Legal obligation | | Send commercial communications / newsletter (if subscribed) | Consent (subscription checkbox) | | Address inquiries and complaints | Legitimate interest / contractual relationship | | Fraud prevention in payments | Legitimate interest |

4. With whom do we share data?

  • Shopify Inc. (e-commerce platform, cloud storage — may involve international transfers with Standard Contractual Clauses (SCC)).
  • Payment Gateway: Shopify Payments / PayPal (only data necessary for the transaction).
  • Carrier: [PENDING: GLS / carrier to be confirmed] (name, address, and phone for delivery).
  • Tax/Accounting advisory firm, to the extent required by law.
  • Authorities when there is a legal obligation.

We do not sell or transfer personal data to third parties for unrelated marketing purposes.

5. Data retention

  • Order and invoice data: 4-5 years (tax obligation).
  • Newsletter data: until the user unsubscribes.
  • Account data: until the user deletes it.

6. Data Subject Rights (ARCO+)

You can exercise your rights of access, rectification, erasure, objection, restriction of processing, and data portability at any time by writing to info@guivernorecords.com, indicating the right you are exercising and attaching a copy of your ID/NIE.

You can also withdraw consent for the newsletter at any time (unsubscribe link in each email) and file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

Appropriate technical and organizational measures are applied (SSL/TLS encryption, encrypted passwords, restricted access to data). No system is infallible, but reasonable means are used to protect information.

8. Minors

The store is not intended for children under 16, and data from minors is not deliberately collected.

9. Changes to this policy

Any changes will be published on this page with the update date.